Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: uhCfqWdvd3UAF6xu9KStjGSq0E6CanlVU+ji0aOQAyo=
Subject key identifier: A6:AC:8B:B8:3C:97:F9:54:5E:6D:BE:89:C0:A5:F6:C5:94:E8:40:23
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0199C5697DAC95DC1DEF2D5808BECB3AA560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 169B
Signing time: Wed 08 Oct 2025 20:00:48 +0000
Manifest this update: Wed 08 Oct 2025 20:00:48 +0000
Manifest next update: Thu 09 Oct 2025 20:00:48 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
4: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: Tds08yFBpUtY82eT3iJsAr7D0D/6do38Jrf7I4KpOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:7d:ac:95:dc:1d:ef:2d:58:08:be:cb:3a:a5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Oct 8 20:00:48 2025 GMT
Not After : Oct 9 20:00:48 2025 GMT
Subject: CN=a6ac8bb83c97f9545e6dbe89c0a5f6c594e84023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:fd:f2:c1:8b:08:28:33:a8:c5:79:65:82:
4d:8b:27:1f:c9:db:c8:15:15:91:5d:04:96:69:db:
78:c5:89:a6:12:8c:61:92:7f:7d:25:f8:d6:2d:fa:
b4:41:5d:1a:1d:a4:85:42:31:b1:cf:71:5f:b0:f0:
06:c0:55:b3:1c:40:91:1d:e5:2d:b5:80:85:c5:d0:
f4:ca:f8:86:07:ec:75:fc:f4:cb:7b:ab:80:e2:02:
8a:1a:40:49:b0:fa:55:fe:87:c4:52:5c:9c:64:78:
17:ae:39:ed:c6:ad:f8:51:fc:01:ea:2d:6c:8b:e8:
e5:f9:5c:e5:b0:16:a3:c8:0e:ec:cb:f0:4e:11:82:
95:fb:79:1f:fb:d4:94:95:e9:80:e0:1a:6a:f4:00:
b0:24:3b:c3:e1:d3:32:1d:22:02:8b:3c:de:13:28:
90:96:3a:86:1a:10:49:f4:64:38:ab:44:79:ac:92:
0c:43:67:02:91:55:14:17:08:11:ac:8f:be:54:d0:
24:fc:f5:7c:4f:25:aa:cc:52:f4:23:73:b6:cd:05:
19:3e:c3:42:30:cc:1d:bd:68:4a:d8:24:11:22:c2:
b4:c8:70:6f:48:ec:37:fd:1b:b2:59:e0:c5:62:b2:
42:90:5d:1d:75:28:69:5b:98:54:33:ff:04:2d:9f:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AC:8B:B8:3C:97:F9:54:5E:6D:BE:89:C0:A5:F6:C5:94:E8:40:23
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:fc:66:4f:bf:c3:d5:92:f4:23:72:50:df:c5:2e:7b:08:
68:89:31:c2:fc:8a:3b:3a:63:29:16:17:f5:3e:3e:5c:c7:04:
bd:86:93:c2:a7:21:93:5c:39:b0:46:97:98:2d:3e:c1:38:a1:
df:da:f6:a9:c8:53:d5:29:8b:32:df:3d:47:c9:42:7f:18:bd:
ea:fa:cd:a7:94:c7:0f:5e:d9:0c:bc:f3:4a:0f:c6:53:4a:de:
b1:0b:c9:75:1b:95:a3:35:dc:e1:5a:fe:6e:60:4c:bd:32:13:
e3:71:f7:80:0d:24:fd:32:c9:94:9b:b7:64:e9:c0:17:71:1e:
41:dd:c9:2a:31:0f:d4:62:bc:66:8d:87:48:53:58:12:0f:a1:
35:b4:a9:23:38:8d:5b:cd:41:5a:4a:5d:a0:47:13:6b:3a:a4:
e2:35:d2:7c:92:82:30:4b:4e:4e:64:a1:cc:39:f0:98:48:c2:
1f:dc:52:db:b5:8f:c7:d4:85:2a:a6:ae:08:96:13:f7:67:b6:
09:96:79:43:c8:06:87:83:b3:3d:da:c0:b8:d1:3e:10:71:82:
af:db:85:a4:5b:47:64:56:c0:ce:c1:84:d5:24:fd:9e:90:92:
e2:e4:31:77:43:dc:b2:f3:e9:4b:9e:7e:79:16:ad:98:89:e4:
11:36:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:22:58 2025 by rpki-client